Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Neuvector Vulnerability Scanner
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49673 1 Jenkins 4 Google Compute Engine, Jira, Matlab and 1 more 2023-12-05 N/A 8.8 HIGH
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.
CVE-2019-10430 1 Jenkins 1 Neuvector Vulnerability Scanner 2019-09-25 2.1 LOW 7.8 HIGH
Jenkins NeuVector Vulnerability Scanner Plugin 1.5 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.